How to Allow Insecure Content in Chrome for One Site

Quick fix: open the site, click the icon to the left of the web address, choose Site settings, find Insecure content, and set it to Allow. Reload the page. This only affects that one site.

What is “insecure content” anyway?

A secure page (one that starts with https) sometimes pulls in pieces from plain http addresses. A script here, an embedded frame there. That mix is called mixed content. Since those HTTP pieces travel unencrypted, someone on the same network could tamper with them.

So Chrome steps in. It tries to load images, audio, and video over HTTPS instead. Scripts and frames that can’t be upgraded get blocked. The page still opens, but a menu won’t work, a form won’t submit, or a video box stays empty.

How do I allow insecure content for one site?

1. Go to the page that isn’t working.
2. Click the site info icon at the left end of the address bar.
3. Click Site settings. A settings tab opens for that site only.
4. Scroll to Insecure content and pick Allow.
5. Go back to the page and reload it.

Want to see every site you’ve made an exception for? Open chrome://settings/content/insecureContent. You can remove sites from that list too.

Can I allow it for every website?

No, and that’s on purpose. Chrome only lets you allow insecure content site by site. A blanket switch would quietly weaken every HTTPS page you visit.

When should I not do this?

Skip it on banking, shopping, email, or any page where you type a password or card number. It’s reasonable for an old intranet tool, a router admin page, a small hobby site you trust, or your own site while you fix it.

Run the site? Fix it at the source

If it’s your website, the real fix is to change every HTTP link for scripts, images, and embeds to HTTPS. Press F12, open the Console tab, and reload. Chrome lists each blocked file as a “Mixed Content” warning, so you know exactly what to update.

FAQ

Is this the same as the “insecure download blocked” warning?

No. That warning is about a file you’re downloading over HTTP. We cover it in our insecure download guide.

Does this work on Chrome for Android?

The per-site setting lives in desktop Chrome and on Chromebooks. On a phone, your best bet is asking the site owner to fix the links.

How do I undo it?

Repeat the steps and set Insecure content back to Block (default), or use Reset permissions in that site’s settings.